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Serial Number xxxxx 
Issuer Name xxxxx 



Subject Name /C=US/0=IBM/OU=DEVT/CN=JSMITH 
Signature xxxxx 
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Certificate 
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• 



ENCE { 



TBSCertif icate, 
Algorithmldent if ier , 
BIT STRING } 



TBSCertif icate 



[0] 



version 
serialNumber 
signature 
issuer 
validity 
subject 

subjectPublicKeylnf o 
issuerUniquelD [1] 
subj ectUniquelD [2] 
extensions [3] 



SEQUENCE { 



Version DEFAULT vl, 

Cert if icateSerialNumber , 

Algorithmldent if ier , 

Name, 

Validity, 

Name , 

SubjectPublicKeylnf o, 
IMPLICIT Uniqueldentif ier OPTIONAL, 
IMPLICIT Uniqueldentif ier OPTIONAL, 
Extensions OPTIONAL } 



Version = INTEGER { vl(0), v2(l), v3 (2) } 



Cert if icateSerialNumber 



INTEGER 



Validity ::= SEQUENCE { 
notBef ore 
notAf ter 

Time : := CHOICE { 
utcTime 
generalTime 



Time, 
Time } 



UTCTime, 

GeneralizedTime } 



Uniqueldentif ier ::= BIT STRING 

SubjectPublicKeylnf o : : 
algorithm 
subj ectPublicKey 



SEQUENCE { 

Algorithmldent if ier , 
BIT STRING } 



Extensions 



SEQUENCE SIZE (1..MAX) OF Extension 



Extension ::= SEQUENCE { 
extnID 
critical 
extnValue 



OBJECT IDENTIFIER, 
BOOLEAN DEFAULT FALSE, 
OCTET STRING } 
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CertificateList ::= SEQUE 
tbsCertList 
signatureAlgorithm 
signatureValue 




BSCertList, 
Algorithmldentifier, 
BIT STRING } 



TBSCertList ::= 
version 



SEQUENCE { 



Version OPTIONAL, 
Algorithmldentifier, 
Name, 
Time, 

Time OPTIONAL, 
SEQUENCE OF SEQUENCE { 
CertificateSerialNumber, 
Time, 

Extensions OPTIONAL 



signature 
issuer 
thisUpdate 
nextUpdate 
revokedCertificates 

userCertificate 

revocationDate 

crIEntryExtensions 
} OPTIONAL, 

crIExtensions [0] EXPLICIT Extensions OPTIONAL 
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certFingerprint ::= SEQUENCE OF SEQUENCE { 
algorithm Algorithmldentifier, 
fingerprint octet string 

} 
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